Privacy policy

Effective Date: 20 July 2025
Business Name: Štěpán Kovář
IČO: 17759331
Business Address: Němčice 95, Němčice 533 52, Czech Republic

Email: support@kovarstepan.com

1. Scope of This Policy

This Privacy Policy explains how we process personal data when you interact with our B2B e-shop selling software licenses and digital tools. This service is provided exclusively for business customers (B2B).

We do not sell to consumers or process data for personal, family, or household use. Consumer privacy rights apply only where they relate to business representatives.

 2. Global Privacy Framework Compliance

We aim to align our practices with major privacy laws worldwide, including:

  • GDPR (General Data Protection Regulation – EU);

  • CCPA / CPRA (California Consumer Privacy Act & Privacy Rights Act – USA);

  • CalOPPA (California Online Privacy Protection Act – USA);

  • UK GDPR & Data Protection Act 2018 (United Kingdom);

  • PIPEDA (Personal Information Protection and Electronic Documents Act – Canada);

  • APPI (Act on the Protection of Personal Information – Japan);

  • LGPD (Lei Geral de Proteção de Dados – Brazil);

  • Privacy Act 1988 (Australia);

Where these laws apply to business contacts (not consumers), we uphold rights of access, correction, and lawful processing.

3. Data Controller

  • Name: Štěpán Kovář;

  • Business ID (IČO): 17759331;

  • Email: support@kovarstepan.com;

  • Jurisdiction: Czech Republic, EU;

4. What Data We Collect

We collect minimal data required for B2B order fulfillment:

a) From customers.

  • Business name and contact person;

  • Business ID (IČO), VAT ID (if applicable);

  • Billing address;

  • Email address;

  • Payment confirmation (e.g., PayPal transaction ID);

  • Product/license purchase history;

b) From website visitors

  • Essential cookies: for cart, login, and language preferences;

  • Analytics cookies (if used): anonymized visitor statistics (e.g., Google Analytics);

  • Marketing cookies (only if explicitly enabled): retargeting or campaign performance;

We do not collect or process:

  • Sensitive personal data (e.g., biometrics, health info)

  • Behavioral data

You can manage or revoke your cookie preferences anytime via the cookie settings link on our website. You may also control cookies through your browser settings. 

5. Purpose of Data Processing

We process data only for:

  • Accepting and fulfilling your order;

  • Issuing tax-compliant invoices;

  • Fulfilling legal and accounting obligations;

  • Order processing, license delivery;

  • Delivering licensed software;

  • Customer communication (e.g., support or updates);

  • Registration on the website www.kovarstepan.com in compliance with Chapter 4, Section 2 of GDPR; 

  • Security and fraud prevention;

  • Website performance and improvement (via cookies);

  • Technical support and communication;

Depending on jurisdiction, our legal bases include:

  • GDPR: Contract performance (Art. 6(1)(b)), Legal obligation (Art. 6(1)(c));

  • CCPA/CPRA: Business purpose (not selling data);

  • UK GDPR, PIPEDA, APPI, LGPD: Similar bases apply (consent not required for core services);

6. Data Source

  • Controller processes personal data obtained with consent from Customer and collected through the contract to purchase and fulfillment of the electronic order created in the e-shop www.kovarstepan.com.;
  • Controller processes only the identifying and contact details of Customer which are necessary for the fulfillment of the contract to purchase;
  • Controller processes personal data for the shipping and accounting purposes and for the necessary communication between the contracting parties for the duration required by law. Personal data will not be made public and will not be transferred to other countries.

7. Data Retention

We retain your data only as long as necessary:

  • For contract performance and service delivery;

  • For legal and accounting obligations (up to 10 years in the EU);

We securely delete or anonymize data after the retention period.

8. Data Sharing

Your data is shared only when necessary and only with:

  • Payment processors (e.g., PayPal);

  • Hosting providers (for software delivery);

  • Accountants or legal advisors (for tax and compliance);

Subcontractors of the Controller are:

  • Webnode AG (e-shop system);
  • Shipping company;
  • Google Analytics (website analytics);

We do not sell, rent, or share your data with third parties for advertising or profiling.

9. Data Security

We apply appropriate technical and organizational measures to protect your data, including:

  • Encrypted communication (TLS/HTTPS);

  • Secure file storage;

  • Access control and minimal data access by staff;

Controller declares to take all technical and organizational precautions necessary for the protection of personal data;

Controller has taken technical precautions to secure data storage spaces, in particular securing access to computer with a password, using antivirus software and performing regular maintenance of computers.

10. Your Privacy Rights

Depending on where you are located, you may have:

  • Right to access – view the data we hold;

  • Right to correct inaccurate information;

  • Right to delete (with legal exceptions);

  • Right to restrict or object to processing;

  • Right to lodge a complaint with your data protection authority;

For EU/UK Residents

Contact: ÚOOÚ – www.uoou.cz or your national DPA.

For California Residents (CCPA/CPRA)

You may request access, correction, or deletion of your business contact data by emailing support@kovarstepan.com. We do not sell or share data in the CCPA sense.

For Other Regions

We honor rights consistent with your local data privacy law, provided the request relates to your role as a business contact.

11. Children's Privacy

This service is not directed to children or consumers. We do not knowingly collect data from anyone under 18 years old.

12. Changes to This Policy

We may update this policy to reflect legal or business changes. The updated version will always be posted on our website with a new effective date.

13. Final provisions

  • By placing an electronic order on the website www.kovarstepan.com Customer confirms to be informed about all the conditions of personal data protection and accepts them to the full extent;
  • Customer accepts these rules by ticking the checkbox in the order purchase form;
  • Controller can update these Rules at any time. New, updated version has to be published on his website.

14. Contact

For privacy-related questions or requests:

📧 support@kovarstepan.com